I'm setting up a VPN network for multiple offices Using OpenVPN. This is dual purpose:
- LAN to LAN VPN allowing traffic to be seamlessly routed between offices.
- Allowing users to connect onto the network when they are out of the office.
This leads to the need for two separate authentication mechanisms:
- Client Certificate for the LAN to LAN
- Single Sign On User/Password (without client certificate) for the users.
According to the documentation:
auth-user-pass-verifyalone will require every user to provide Client certificate AND User / Password
client-cert-not-requiredwill reqire only the User / Password
Question: How can I I configure Open VPN to Authenticate some clients with just the client certificate and other clients with Just the User / Password?